No analysis available yet.
Vendor Solution
IBM encourages customers to update their systems promptly. Appliance Affected Products Fix availability IBM Verify Identity Access Download IBM Verify Identity Access v11.0.3 IF2 https://www.ibm.com/support/fixcentral/quickorder IBM Security Verify Access Download IBM Security Verify Access v10.0.9.2 IF2 https://www.ibm.com/support/fixcentral/quickorder Container Container Download https://docs.verify.ibm.com/ibm-security-verify-access/docs/containers
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7286188 |
|
Fri, 04 Sep 2026 17:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Verify Identity Access Advanced Access Control may be vulnerable to an information disclosure attack. | |
| Title | Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access | |
| First Time appeared |
Ibm
Ibm security Verify Access Ibm security Verify Access Container Ibm verify Identity Access Ibm verify Identity Access Container |
|
| Weaknesses | CWE-1336 | |
| CPEs | cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:security_verify_access:10.0.9.2:interim_fix_001:*:*:*:*:*:* cpe:2.3:a:ibm:security_verify_access_container:10.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:security_verify_access_container:10.0.9.2:interim_fix_001:*:*:*:*:*:* cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:verify_identity_access:11.0.3:interim_fix_001:*:*:*:*:*:* cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:verify_identity_access_container:11.0.3:interim_fix_001:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm security Verify Access Ibm security Verify Access Container Ibm verify Identity Access Ibm verify Identity Access Container |
|
| References |
|
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-09-04T16:46:39.948Z
Reserved: 2026-06-24T22:14:17.818Z
Link: CVE-2026-13297
No data.
Status : Received
Published: 2026-09-04T17:16:51.573
Modified: 2026-09-04T17:16:51.573
Link: CVE-2026-13297
No data.
OpenCVE Enrichment
No data.
-
CWE-1336
Improper Neutralization of Special Elements Used in a Template Engine